Can we trust third party apps with our login credentials?